$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: X/Cuv4S7lBIA6a+oVDDJv7E5iLGtpykM4FSFmTaBHtw= Subject key identifier: 64:06:BA:2F:7C:C3:0F:F2:68:AE:6E:D3:9D:7C:B7:30:4A:3A:A4:6E Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 0692 Signing time: Sat 18 May 2024 23:20:14 +0000 Manifest this update: Sat 18 May 2024 23:20:13 +0000 Manifest next update: Sat 25 May 2024 23:20:13 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: HXYk6Xv6RGVXhQbkXnytWlgI8N8MT7+4ipP5kQx+yVQ=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: qEqQfXHfbyISuL0cdw/rlmC00m4dNQOaNJBD2WlRotA=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: kbdjY2OJIhMziw3qryw6oHlmwYn20X0C78rnakQFSs8=) 4: A2201588391F11EBAD1E3A2CC4F9AE02.roa (hash: uUl4OOjjVYu5CafSIQQTXknEsBMr0bl5pgf0r0tVsTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: May 18 23:20:13 2024 GMT Not After : May 25 23:20:13 2024 GMT Subject: CN=664937ae-18a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:c2:00:40:79:ba:93:0b:2c:78:52:e0:9e: a8:75:3e:82:69:a1:b5:46:5a:a2:8e:d6:99:f1:7a: 5e:78:0e:f8:a9:2e:ee:76:60:d8:85:ac:24:79:fa: e3:6f:8c:48:10:64:92:1d:08:78:11:49:1d:d3:f6: a5:58:df:d4:c9:2c:2d:b2:51:a8:3a:74:dd:f1:3c: 36:6b:45:6c:3a:9a:33:3e:79:93:25:6b:db:e3:f0: f0:b5:94:6c:b2:be:05:5d:cb:17:84:d1:23:4b:3f: 7b:3e:4a:db:9b:6f:eb:97:54:8e:e1:f2:b4:a7:55: f7:66:5b:f2:02:29:e9:63:2a:f5:e5:81:42:d7:08: a1:e2:b5:a2:1c:35:ca:ca:ce:2d:7e:db:e0:1e:1d: 31:08:76:17:77:52:6a:7a:01:19:e5:d8:d2:38:d2: 60:28:a5:74:18:05:d0:4a:6c:8a:b2:07:99:74:dc: ab:3f:97:1f:5a:ae:e0:46:8c:65:64:7f:f7:ee:06: 49:bb:e0:52:78:b0:6f:79:60:60:a7:23:06:9a:69: c2:2f:a7:34:36:79:64:93:17:57:ba:ba:8a:b7:27: 8b:3a:37:7e:78:79:6d:e9:d8:72:aa:48:5b:2a:c7: da:88:e9:9b:b7:be:9b:d2:72:4a:56:b8:05:0f:0d: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:06:BA:2F:7C:C3:0F:F2:68:AE:6E:D3:9D:7C:B7:30:4A:3A:A4:6E X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9a:67:63:74:e7:51:5d:92:16:20:05:83:65:e6:5c:22:0e: 0d:64:b6:66:39:9b:8f:c4:f3:ed:e0:3f:af:7b:47:20:a3:67: 2b:57:18:16:3c:4d:ff:49:ee:2c:c4:82:4f:c4:f7:ef:c5:26: 22:f1:f4:ad:53:eb:30:b7:4a:09:4b:08:15:33:12:19:c5:15: 66:1c:a1:ae:0d:b7:d3:89:34:18:1e:4a:38:3e:df:d0:68:36: df:b7:1a:1d:c4:4a:b9:86:8a:01:47:e2:f5:43:b6:90:9d:21: 8a:22:2e:a3:2e:30:2c:60:f6:06:7f:14:c9:0d:34:3a:f6:3b: 4d:39:40:e9:14:61:80:7c:25:6b:27:02:61:d7:be:fd:3c:32: 98:77:f5:6e:97:88:ef:a0:8a:2b:6a:f3:96:c7:ab:65:4f:5a: de:df:f7:9b:61:0a:d8:5f:b7:65:dc:e7:25:8a:9f:da:67:e6: 93:a5:7d:c1:89:46:13:7c:c5:84:fc:21:33:e3:0a:53:03:99: 32:56:4b:cd:82:b0:d1:4b:99:ae:f4:c6:b4:84:34:50:db:93: 94:55:1d:ee:0f:15:80:11:99:68:cf:3d:f5:1c:01:23:30:31: 2c:fd:60:b9:bb:9d:3f:df:47:32:0c:00:ba:11:72:67:13:c4: 22:b5:11:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjQwNTE4MjMyMDEzWhcNMjQwNTI1MjMyMDEzWjAYMRYwFAYD VQQDEw02NjQ5MzdhZS0xOGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RbCAEB5upMLLHhS4J6odT6CaaG1RlqijtaZ8XpeeA74qS7udmDYhawkefrj b4xIEGSSHQh4EUkd0/alWN/UySwtslGoOnTd8Tw2a0VsOpozPnmTJWvb4/DwtZRs sr4FXcsXhNEjSz97Pkrbm2/rl1SO4fK0p1X3ZlvyAinpYyr15YFC1wih4rWiHDXK ys4tftvgHh0xCHYXd1JqegEZ5djSONJgKKV0GAXQSmyKsgeZdNyrP5cfWq7gRoxl ZH/37gZJu+BSeLBveWBgpyMGmmnCL6c0NnlkkxdXurqKtyeLOjd+eHlt6dhyqkhb KsfaiOmbt76b0nJKVrgFDw1lpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQGui98 ww/yaK5u0518tzBKOqRuMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtmmdjdOdRXZIWIAWDZeZcIg4NZLZmOZuPxPPt4D+ve0cgo2crVxgW PE3/Se4sxIJPxPfvxSYi8fStU+swt0oJSwgVMxIZxRVmHKGuDbfTiTQYHko4Pt/Q aDbftxodxEq5hooBR+L1Q7aQnSGKIi6jLjAsYPYGfxTJDTQ69jtNOUDpFGGAfCVr JwJh1779PDKYd/Vul4jvoIoravOWx6tlT1re3/ebYQrYX7dl3Oclip/aZ+aTpX3B iUYTfMWE/CEz4wpTA5kyVkvNgrDRS5mu9Ma0hDRQ25OUVR3uDxWAEZlozz31HAEj MDEs/WC5u50/30cyDAC6EXJnE8QitRHW -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org